Privacy Policy

1 Introduction

The "Kosmas Iliadis" Radiology Clinic considers safety as the highest priority
and the protection of your personal data, in any capacity
communicate or work with us, including but not limited to patients –
examinees, employees, suppliers, individuals or cooperating third parties. For the reason
this is why we take appropriate measures to protect personal information
data we process and to ensure that the processing of
of personal data is always carried out in accordance with the obligations that
are set by the current legal framework. The "Kosmas Iliadis" Radiology Clinic, yours
informs that it processes personal data of its customers
in accordance with applicable national legislation and European Regulation 2016/679
for the protection of natural persons against the processing of data
of a personal nature and for the free movement of such data
(General Data Protection Regulation, hereinafter "Regulation"), such as
apply.

2. Controller

For any matter related to the processing of personal data
contact the Data Controller directly.
"Kosmas Iliadis" Radiology Clinic, based in Piraeus, on the Iroon Polytechnic
No. 98, PO Box 185 36, tel. 210 4288040-1, E-mail: kosmasiliadis1@yahoo.gr

3. Data we collect

Your personal data that we collect and process are the absolute
necessary, necessary and appropriate to achieve our intended purposes,
are summarized as follows:
• identity and demographic data (e.g. name,
patronymic, date of birth-age, spouse's name, gender, number
identity card, passport number, health record number,
VAT number, profession etc.),
• data of third parties, such as your relatives/companions (e.g. name, surname,
patronymic etc.) for receiving your medical results on
for example,
• contact information (e.g. postal address, landline and
mobile phone, e-mail) for communication between us, the sending of
your exam results,
• insurance information (insurance fund or company, insurance relationship,
insurance company, group or individual insurance policy number, code
coverage, effective or renewal date of the policy,
date of expiry of insurance cover, date of shipment
registration, policy status (active or invalid),
• health data, which concern diagnostic and clinical tests,
hospitalization, physician referrals, clinical symptoms, medical staff
and/or family history, medication and therapy, medical
opinions and medical findings, any disabilities and disabilities,
details of surgeries, previous health care,
examinee code, AMKA etc. We may also collect
process health data for us to provide medical
services that were not provided by our Radiology Clinic, but by us
they were announced/transmitted by you or a person accompanying you and
become absolutely necessary to assess your state of health,
• payment method information such as information
credit/debit card, etc., details of the debtor
expenditure,
• data about requests you submit for the exercise
your rights or complaints,
• data about attached resumes that you submit with
application for work in our radiology clinic.
• image data and visual material from closed circuit television
(CCTV) and security cameras

4. Method of Collection of Personal Data

The collection of personal data is carried out both physically and with
electronic media on a case-by-case basis, such as are indicative:
• when you fill in forms at the clinic's office and give them to us
deliver,
• when you use our call center for scheduling
examination or receiving other medical service,
• when we provide medical health services to you following information;
that you give us or arise during your examination or constitute the
results of your medical examinations,
• when you notify us of your wish to make use of your insurance policy
contract,
• when you apply to work in our radiology practice.
• when you enter the radiology clinic, where surveillance is carried out by
closed circuit television (CCTV) and security cameras

5. Purpose of personal data processing

The personal data you provide us name, email, mobile/landline
phone, health data we only process it when we have a legitimate reason to
We do it. Legitimate reasons for processing your personal data are:
(a) the consent you give us under the specific conditions it sets out;
the legal framework, such as for example filing complaints and forwarding to
insurance company of special categories of your personal data, such as
health data,
(b) the provision of health services that you entrust to us and wish to receive from
us,
(c) our compliance with an obligation imposed by law, such as for
for example, compliance with the Code of Medical Ethics Law 3418/2005,
(d) safeguarding and protecting our legitimate interests,
(e) regarding the processing of special categories of data (health data),
processing that is necessary for preventive or professional purposes
medicine, medical diagnosis,
(f) the planning of the medical visit and/or the -after the previous one
identification of subjects - provision of medical services,
(g) the sending/delivery to you of the results of the medical examinations which
carried out in the radiology department,
(h) the – after prior identification – communication between us and the management of
your requests, whether related to personal data protection issues, or
the quality of your service,
(i) As an exception, the data of your medical file is used, when this
becomes necessary for the establishment, recognition, exercise or defense of a right
and legal claims in cases involving medical liability and provision in general
health services.
(j) We use a video surveillance system for the purpose of protecting persons
and goods. The processing is necessary for the purposes of legitimate interests which
we seek as a data controller (Article 6 par. 1. f GDPR).

6. Legal basis for personal data processing

"Kosmas Iliadis" Radiology Clinic processes your personal data with
transparency according to the principles of legality, proportionality, confidentiality and
integrity, purpose limitation and specific retention time
of data and data minimization.
The legal basis for processing your personal data on a case-by-case basis may
is:
(a) your consent;
(b) the necessity of processing your data in the context of contractual performance
obligation or during the pre-contractual stage (medical planning process
visit),
(c) the necessity to process your data in the context of legal safeguards
our interests,
(d) the necessity to process your data in the context of compliance with legal
our obligation,
(e) the necessity to process your data for preventive purposes or
professional medicine, medical diagnosis or by virtue of a contract with his professional
health sector,
(f) the necessity of processing for the performance of the obligations and exercise
specific rights of ours or yours in the area of employment law and
social security and social protection law or to fulfill a duty
performed in the public interest,
(g) the necessity of processing the data for the protection of vital interests
of you or the person you are accompanying,
(h) the necessity of processing your data for the establishment, exercise or
support rights and legal claims in cases involving medicine
responsibility and in general the provision of health services,
(i) in relation to closed circuit television (CCTV), our legitimate interest consists
in the need to protect our space and the goods in it from
illegal acts, such as indicative of thefts. The same applies to her safety
life, physical integrity, health and property of the staff
us and third parties who are legally present in the monitored area. We collect only
image data and we limit the download to places we have assessed as being present
increased possibility of committing illegal acts e.g. theft, as in her place
reception and at the entrance, without focusing on areas where they might
the private life of the persons whose image is taken is unduly restricted,
including their right to respect for personal data
character.
It is noted that according to the current legislative framework for the provision of medical
services and the processing of your personal data necessary for
for this purpose, your consent is not required (no. 9 par. 2 par. h) of the General
Regulation).

7. Personal Data Storage Period

The period of data storage is decided based on
below specific criteria depending on the case:
In cases where we process your personal data based on
your consent, then this data is kept until it is revoked. She
can be performed by you at any time. Her recall
of consent does not affect the lawfulness of the processing based on
consent during the period before its revocation.
To withdraw your consent contact the Protection Officer
Data Controller (DPO) of the "Kosmas Iliadis" Radiology Clinic in the following details
contact:
• email: dpo.iliadis@yahoo.com
• Telephone: 2111158961
When the processing is performed on the basis of a contract, your personal data
stored for as long as necessary for its execution
contract and for the establishment, exercise, and/or support of legal claims with
based on the contract.
When the processing is imposed as an obligation by provisions of the applicable law
legal framework, such as tax legislation, your personal information
data will be stored for as long as the relevant ones impose
provisions. In particular for health data, and in accordance with the Medical Code
Ethics Law 3418/2005 article 14, the maintenance of medical records is provided for
a decade (10 years) from the last visit of the patient-examined to
private clinics and its other primary health care units
private sector and for twenty years (20 years) from his last visit
patient in any other case.
Regarding the data collected through the video surveillance system,
these are kept for seven (7) days, after which they are automatically deleted.
In the event that we find an incident during this time, we isolate
part of the video and we keep it for up to one (1) more month, for the purpose of investigating it
incident and the initiation of legal proceedings to defend the law
our interests, while if the incident concerns a third party we will keep the video up to
three (3) more months.
In case the time limits change, we will inform you about each
change.

8. Your rights in relation to your personal data

Any natural person whose data is processed by
The "Kosmas Iliadis" Radiology Clinic enjoys the following rights:
Access right:
You have a right to be aware and verify its legality
processing. So you have the right, upon request, to have access
to the data and receive additional information about
processing them.
Right of rectification:
You have the right to study, correct, update or
modify your personal data by contacting the Responsible
Data Protection Officer (DPO) at the contact details above.
Right to erasure:
You have the right to request the deletion of your personal data
when we process them based on your consent or in order to
protect our legal interests. In all other cases
(as indicative when there is a contract, an obligation to process personal
data required by law, public interest), the right in question
is subject to specific restrictions or does not exist depending on the
case.
Right to restrict processing:
You have the right to request restriction of the processing of your personal data
data in the following cases:
(a) when the accuracy of the personal data is challenged and until it is
verification,
(b) when you object to the erasure of personal data and request erasure instead
the restriction of their use,
(c) when the personal data is not needed for the processing purposes, you
are nevertheless necessary for the establishment, exercise, support of legal claims,
and
(d) when you object to the processing and until it is verified that they exist
legitimate reasons that concern us and override the reasons why
you object to the processing.
Right to object to processing:
You have the right to object at any time to the processing of personal data
of your data in the cases where, as described above, this is
necessary for purposes of legitimate interests that we pursue as responsible
processing.
Right to portability:
You have the right to receive your personal data free of charge in a format that
will allow you to access, use and
edit with the commonly used editing methods. Also, you have
right to ask us, if technically possible, to transmit them
data and directly to another controller. That's your right
exists for the data you have provided to us and its processing
carried out by automated means based on your consent or in execution
relevant contract.
The above-mentioned rights are subject to specific
restrictions or possibly not exist, as the case may be,
taking into account the more specific legislative framework, such as for example the
right to erasure, does not apply to data processing in its domain
provision of health services, given the mandatory maintenance of a medical record,
according to the Code of Medical Ethics.

9. Data Protection Officer (DPO) contact details

To exercise any of your above rights you can
contact the Data Protection Officer (DPO)
• email: dpo.iliadis@yahoo.com
• Telephone: 2111158961
10. Right of complaint to APDPH
You have the right to lodge a complaint with the Data Protection Authority
Personal (www.dpa.gr): Telephone Center: +30 210 6475600, Fax:
+30 210 6475628, Email: contact@dpa.gr

11. Security of Personal Data

The "Kosmas Iliadis" Radiology Clinic implements appropriate technical and organizational measures
measures aimed at the safe processing of personal data and
prevent accidental loss or destruction and unauthorized and/or
unlawful access, use, modification or disclosure thereof. In every
case, the way the internet works and the fact that it is free
to anyone who does not allow warranties to be provided that unauthorized
third parties will never gain the ability to violate them
applied technical and organizational measures, gaining access and
possibly making use of personal data for non
authorized and/or improper purposes.

12. Changes to this Personal Data Protection Policy

Character
The "Kosmas Iliadis" Radiology Clinic can review unilaterally and periodically
this Policy, so that it is harmonized with the recent legislation on
personal data protection.
We encourage you to periodically refer to this Policy in order to
you are informed about how we manage and process them
your personal data.